CAPI uses PVK format for private keys. You can find out more information
here:
http://www.drh-consultancy.demon.co.uk/pvk.html
http://www.drh-consultancy.demon.co.uk/pkcs12faq.html

I modified original pvk program to proper work with CryptImportKey.
http://lrn.ru/~mouse/pvk-0.12-alt.tar.bz2
Run it as:
pvk -in private.pem -out private.pvk -topvk -nocrypt -keyonly
Last argument is my modification which creates proper PVK file to use it
with CryptImportKey.

On Sun, Dec 04, 2005 at 01:41:03AM -0500, Han Jun Li wrote:
> Hi,
>       I have created a plugin for OpenSSL which reads a certificate 
>       through Microsoft's CryptoAPI. The problem is that the private key is 
> not 
> returned and I just have a handle to it.  During the handshake with a Java 
> JSSE client, I get an error of BAD_MAC.  If the certificate was stored as a 
> PEM file with the private key accessible, everything works ok.
> 
>       Does anyone have success using Java Client to talk to OpenSSL using 
>       a CryptoAPI stored certificate?  Any help will be greatly appreciated!
>       Thanks!
> 
> /han
> 
> 
> ______________________________________________________________________
> OpenSSL Project                                 http://www.openssl.org
> User Support Mailing List                    openssl-users@openssl.org
> Automated List Manager                           [EMAIL PROTECTED]
--
mouse

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to